Changing the event search conditions
To change the event search conditions, perform the following actions in the Threat Hunting section of the program web interface window:
- Click the form containing the event search conditions in the upper part of the window.
- Select one of the following tabs:
- Builder, if you want to change the event search conditions in design mode.
- Source code, if you want to change the event search conditions in source code mode.
- Make the relevant changes.
- Click one of the following buttons:
- Refresh, if you want to refresh the current event search with the new conditions.
- New search, if you want to perform a new event search.
The table of events that satisfy the search criteria is displayed.
Page top